user auth mostly works